TITLE OF THE INVENTION 

CONTENT-CERTIFIED E-MAIL SERVICE SYSTEM 
BACKGROUND OF THE INVENTION 

1 . Field of the Invention 

The present invention relates to a content-certified e-mail 
(electronic mail) service system allowing a third party to certify 
objectively the contents of an e-mail sent from a sender to a 
destination on a network such as the Internet. 

2 . Description of the Related Background Art 

In the current postal system in Japan, it is known that the 
content -certified postal service is available to have the text 
contents of a postal matter certified by the Ministry of Posts and 
Telecommunications. A content-certified mail can be an evidence 
as to what kind of contents that the mail has, a sender sent the 
mail and a receiver received the mail. Thus, the content - 
certified postal service is used particularly when delivering 
documents pertaining to law or a declaration of intent , or a 
record of the mailing date is necessary. 

Recently, with wide spread use of e-commerce (electronic 
commerce), such an on-line mail-order service on the Internet, an 
increase in the cases is predicted, where notices pertaining to 
law, such as notices of cooling-off, are sent by e-mails. 
However, the e-mail system on the Internet has not established an 
organization for providing a service such as the current content - 
certified postal service to have the contents of a mail certified 
by a third party. 

If a sender wants to use the current content-certified postal 



service, the sender has to (1) prepare a hard copy of text in 
triplicate, and (2) take the hard copy in triplicate to a postal 
office where postal matters are collected and delivered, or a 
postal office designated by the postmaster of a local post office. 
Thus, the current service is tedious and time-consuming for e-mail 
users. Because the current service is quite inconvenient, there 
has been a need to establish a system to have the contents of an 
e-mail certified in the original form of electronic media. 
SUMMARY OF THE INVENTION 

It is therefore an object of the present invention to provide 
a content-certified e-mail service system, in which the contents 
of a text of an e-mail can be certified readily in a reliable 
manner . 

A content-certified e-mail service system according to the 
present invention is a content -certified e-mail service system 
having an e-mail content certifying device for certifying contents 
of a text of an e-mail sent from an e-mail terminal device at a 
sender's side to an e-mail terminal device at a receiver's side 
within a network, and characterized in that: the e-mail terminal 
device at the sender's side sends a content certification request 
e-mail containing an e-mail address of the e-mail terminal device 
at the receiver's side and a text of content certification to the 
e-mail content certifying device; and the e-mail content 
certifying device judges , upon receipt of the content 
certification request e-mail, whether there is any tampering with 
the text of content certification in the e-mail, and upon judging 
that there is no tampering with the text of content certification. 



saves registration information that contains the text of content 
certification in a storage device, while sending a content - 
certified e-mail that contains the text of content certification 
to the e-mail terminal device at the receiver's side, and a 
receipt e-mail that contains receipt information indicating that 
content certification has been effected to the e-mail terminal 
device at the sender's side. 

According to the content-certified e-mail service system of 
the present invention, by merely sending a content certification 
request e-mail from the e-mail terminal device at the sender's 
side to the e-mail content certifying device, an e-mail containing 
a content-certified text is sent to the e-mail terminal device at 
the receiver's side. In addition, the e-mail content certifying 
device saves the content-certified text as the registration 
information. Consequently, the text of an e-mail can be certified 
readily in a reliable manner. 
BRIEF DESCRIPTION OF THE DRAWINGS 

Fig. 1 is a view showing an arrangement of a content- 
certified e-mail service system of the present invention; 

Fig. 2 is a flowchart showing a content certifying operation 
and a reviewing operation; 

Fig. 3 is a view showing an arrangement of the body portion 
of a content certification request e-mail; 

Fig. 4 is a view showing information items contained in the 
body portion of the content certification request e-mail; 

Fig. 5 is a view showing particulars in one set of 
registration information; 

-3- 



Fig. 6 is a view showing an arrangement of the body portion 
of a content -certified e-mail; 

Fig. 7 is a view showing information items contained in the 
body portion of the content-certified e-mail; 

Fig. 8 is a view showing an arrangement of the body portion 
of a receipt e-mail; 

Fig. 9 is a view showing information items contained in the 
body portion of the receipt e-mail; 

Fig. 10 is a view showing an arrangement of the body portion 
of a review request e-mail; 

Fig. 11 is a flowchart showing a content certifying 
operation; 

Fig. 12 is a view showing an arrangement of the body portion 
of a content certification notice e-mail; 

Fig. 13 is a view showing information items contained in the 
body portion of the content certification notice e-mail; 

Fig. 14 is a view showing an arrangement of the body portion 
of a delivery certification e-mail; and 

Fig. 15 is a view showing information items contained in the 
body portion of the delivery certification e-mail. 
DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS 

The following description will describe embodiments of the 
present invention in detail with reference to the accompanying 
drawings . 

Fig. 1 shows a content-certified e-mail service system as an 
embodiment of the present invention. The content -certified e-mail 
service system includes e-mail terminal devices 1 and 2, a network 
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3 such as the Internet, an e-mail content certifying device 4, a 
special network 5 for settlement, and a settling device 6. 

The e-mail terminal devices 1 and 2 may be the same devices, 
and for example, are composed of personal computers and connected 
to the network 3 separately. In the present embodiment, the e- 
mail terminal device 1 is used as a terminal device at a sender's 
side and the e-mail terminal device 2 as a terminal device at a 
receiver's side for ease of explanation. It should be 
appreciated, however, that each of the terminal devices 1 and 2 
can be either the one at the sender's side or receiver's side, or 
at the both sides. 

The e-mail content certifying device 4 is connected to the 
network 3. The e-mail content certifying device 4 is a server 
that transfers an e-mail sent from the e-mail terminal device 1 at 
the sender's side to the e-mail terminal device 2 at the receiver's 
side through the network 3 with the contents of the e-mail 
certified. Also, the e-mail content certifying device 4 includes 
a storage device 4a, in which a content certificate database is 
formed as will be described below. 

Both of the e-mail content certifying device 4 and settling 
device 6 are connected to the special network 5. The special 
network 5 is an independent network distinguished from the other 
networks such as the network 3. The settling device 6 is composed 
of a host computer in a credit card company, and settles a payment 
of the content -certified e-mail service fee. 

Next, the following description will describe an operation of 
the e-mail content certification service effected by the above- 
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arranged system of the present invention with reference to Fig. 2. 

In response to sender's manipulation, the e-mail terminal 
device 1 at the sender's side sends a content certification 
request e-mail to the e-mail content certifying device 4 (Step 
SI). The content certification request e-mail is sent by using a 
mail encryption protocol such as S/MINE. As shown in Fig. 3, the 
body portion of the content certification request e-mail contains: 
(a) sender's information; (b) receiver's information; (c) 
settlement information; (d) text information of content 
certification; and (e) digital certificate information. The body 
portion having the foregoing information items is cited in Fig. 4. 

The content certification request e-mail sent from the e-mail 
terminal device 1 at the sender's side is supplied to the e-mail 
content certifying device 4 through the network 3. When the 
content certification request e-mail is sent from the e-mail 
terminal device 1, the e-mail address of the e-mail content 
certifying device 4 is set in the e-mail terminal device 1 at the 
sender's side as a destination. 

Upon receipt of the content certification request e-mail, the 
e-mail content certifying device 4 checks the sender by using the 
(a) sender's information, (d) text information of content 
certification, and (e) digital certificate information in the body 
portion of the received content certification request e-mail, and 
at the same time, checks if there is any tampering with (d-1) text 
(Step S2). The e-mail terminal device 1 at the sender's side 
computes the (d-1) text by a predetermined algorithm, encrypts the 
computation result, and incorporates the encrypted information in 
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(d-2) sender's digital signature. Hence, the e-mail content 
certifying device 4 retrieves the encrypted information from the 
(d-2) sender's digital signature to decrypt the encrypted 
information, and obtains the computation result by the e-mail 
terminal device 1 at the sender's side. At the same time, the e- 
mail content certifying device 4 actually computes the (d-1) text 
by using a predetermined algorithm, and checks if there is any 
tampering with the (d-1) text by comparing the former computation 
result with the latter computation result. Further, the e-mail 
content certifying device 4 generates (x-1) sender's identifier 
and (x-2) receiver's identifier, and saves all the information 
including these identifiers as shown in Fig. 5 in the storage 
device 4a as one set (one record) of registration information 
(Step S3). The registration information is contained in the 
content certificate database as a certified copy of the content 
certificate. The period of preservation of the registration 
information in the content certificate database is, for example, 
five years. Each of the (x-1) sender's identifier and (x-2) 
receiver's identifier is an identifier used in retrieving one set 
of registration information from a plurality sets of registration 
information saved in the content certificate database. Of all th< 
information shown in Fig. 5, not only the (x-1) sender's 
identifier and (x-2) receiver's identifier, but also (y-1) 
acceptance date and time, (y-2) transference date and time, (y-3) 
delivery date and time, and (z-1) delivery information are 
generated in the e-mail content certifying device 4. 

The e-mail content certifying device 4 issues a request 
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command for a credit card settlement to the settling device 6 
(Step S4). The request command uses (c-1) sender's credit card 
number and (c-2) PIN (Personal Identification Number) of the 
credit card in the (c) settlement information contained in the 
body portion of the received content certification request e-mail. 
The request command sent from the e-mail content certifying device 
4 is supplied to the settling device 6 through the special network 
5. The settling device 6 settles a payment of the fee for the 
service provided to the sender of the content certification 
request e-mail. 

The e-mail content certifying device 4 sends a content- 
certified e-mail to the destination specified by (b-3) receiver's 
e-mail address (Step S5). The content-certified e-mail is sent by 
using a mail encryption protocol such as S/MINE. Also, as shown 
in Fig. 6, the body portion of the content -certified e-mail 
contains (h) content certificate information, (d) text information 
of content certification, and (e) digital certificate information. 
Each of the foregoing information items is cited in Fig. 7. 

The content-certified e-mail sent from the e-mail content 
certifying device 4 is saved in a storage region corresponding to 
the (b-3) receiver's e-mail address in an unillustrated receiver's 
mail server through the network 3. If the e-mail address 
coincides with the e-mail address of the receiver using the e-mail 
terminal device 2 at the receiver's side, in response to a 
receiver's manipulation, the e-mail terminal device 2 at the 
receiver's side accesses the storage region corresponding to the 
(b-3) receiver's e-mail address in the receiver's mail server 
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through the network 3, and reads out the content-certified e-mail 
saved in the storage region. 

Upon receipt of the content-certified e-mail, the receiver 
can confirm that there is no tampering with the (h) content 
certificate information and the (d-1) text of content 
certification sent from the sender, based on the foregoing 
information . 

Upon sending of the content -certified e-mail, the e-mail 
content certifying device 4 updates the (y-2) transference date 
and time and (z-1) delivery information in the corresponding 
record within the content certificate database (Step S6). 

In addition, the e-mail content certifying device 4 sends a 
receipt e-mail to the address specified by the (a- 3) sender's e- 
mail address (Step S7). The receipt e-mail is sent by using a 
mail encryption protocol such as S/MINE. In addition, as shown in 
Fig. 8, the body portion of the receipt e-mail includes (i) 
receipt information, (d) text information of content 
certification, and (e) digital certificate information. Each of 
the foregoing information items is cited in Fig. 9. 

The receipt e-mail sent from the e-mail content certifying 
device 4 is saved in a storage region corresponding to the (a- 3) 
sender's e-mail address in an unillustrated sender's mail server 
through the network 3. If the e-mail address coincides with the 
e-mail address of the sender using the e-mail terminal device 1 at 
the sender's side, in response to a sender's manipulation, the e- 
mail terminal device 1 at the sender's side accesses the storage 
region corresponding to the (a-3) sender's e-mail address in the 
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sender's mail server through the network 3, and reads out the 
receipt e-mail saved in the storage region. 

The sender who received the receipt e-mail can confirm that 
there is no tampering with the (i) receipt information and the (d- 
1) text of content certification, based on the foregoing 
information . 

Also, the sender is allowed to review a certified copy saved 
in the content certificate database later if the sender presents 
the receipt in the text of the receipt e-mail received from the e- 
mail content certifying device 4 by reviewing means described 
below. 

Next, the following description will describe a reviewing 
operation that allows the sender to review the certified copy. 

In response to a sender's manipulation, the e-mail terminal 
device 1 at the sender's side sends a review request e-mail to the 
e-mail content certifying device 4 (Step Sll). The review request 
e-mail is sent by using a mail encryption protocol such as S/MINE. 
Also, as shown in Fig. 10, the body portion of the review request 
e-mail contains the (i) receipt information. 

The review request e-mail sent from the e-mail terminal 
device 1 at the sender's side is supplied to the e-mail content 
certifying device 4 through the network 3. 

Upon receipt of the review request e-mail, the e-mail content 
certifying device 4 retrieves one set of registration information 
from the content certificate database based on the (x-1) sender's 
identifier in the (i) receipt information presented in the body 
portion of the e-mail (Step S12). As previously mentioned, each 
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set of registration information contains the (x-1) sender's 
identifier and (x-2) receiver's identifier. This makes it 
possible to retrieve one set of registration information 
corresponding to the (x-1) sender's identifier. Upon retrieval of 
the corresponding set of registration information, the e-mail 
content certifying device 4 checks whether the (i) receipt 
information in the body portion of the received review request e- 
mail is correct or not (Step S13). The check is performed by 
using the (e-2) digital certificate of the e-mail content 
certifying device contained in the retrieved registration 
information and (i-2) the digital signature of the e-mail content 
certifying device in the (i) receipt information in the body 
portion of the received review request e-mail. 

Upon check of the (i) receipt information in the body portion 
of the review request e-mail received in Step S13, the e-mail 
content certifying device 4 sends a review result e-mail to the 
address specified by the (a-3) sender's e-mail address (Step S14). 
The review result e-mail is sent by using a mail encryption 
protocol such as S/MINE. Also, the information items contained in 
the body portion of the review result e-mail are the same as those 
in the receipt e-mail cited in Fig. 8. 

The review result e-mail sent from the e-mail content 
certifying device 4 is read out by the e-mail terminal device 1 at 
the sender's side from the storage region corresponding to the (a- 
3) sender's e-mail address in the sender's mail server in the same 
manner as the foregoing receipt e-mail. 

Upon receipt of the review result e-mail, the sender can 
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confirm the (d-1) text of content certification from the text 
therein . 

According to the above embodiment, by constructing the e-mail 
content certifying device 4 under administration of a third party 
on the network 3, e-mail users who wish to send a content - 
certified e-mail can use the content-certified e-mail delivery 
service by merely sending a content certification request e-mail 
to the e-mail content certifying device 4, so that the contents of 
an e-mail is certified by a third party and a content -certified e- 
mail is sent to the destination. Consequently, unlike the current 
content-certified postal service, the e-mail users can save time 
and labor in ( 1 ) preparing a hard copy of text in triplicate and 
(2) taking the hard copy in triplicate to a post office. Hence, 
convenience of each of the e-mail users is increased, and a notice 
pertaining to law such as a notice of cooling off can be sent by 
an e-mail. Thus, more extensive use of e-mails can be expected. 

In the foregoing first embodiment, it is generally difficult 
to confirm at the sender's side whether a content-certified e-mail 
has been correctly delivered to the destination on the Internet in 
a secure manner. However, delivery certification of a content - 
certified e-mail can be realized in the same manner as a delivery- 
certified mail in the current postal service if the e-mail content 
certifying device 4 is furnished with a function to serve as a Web 
server and the e-mail terminal device 2 at the receiver's side is 
provided with a Web browser. 

Next, the following description will describe, with reference 
to Fig. 11, an operation of the e-mail content certification 
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service that realizes delivery certification as another embodiment 
of the present invention. 

In the operation of the e-mail content certification service 
realizing delivery certification, the actions cited in Steps SI 
through S4 in Fig. 2 are also carried out. 

After Step S4 , the e-mail content certifying device 4 does 
not act as cited in Step S5 in Fig. 2, but sends a content 
certification notice e-mail to the destination specified by the 
(b-3) receiver's e-mail address (Step S5'). The content 
certification notice e-mail is sent by using a mail encryption 
protocol such as S/MINE. Also, as shown in Fig. 12, the body 
portion of the content certification notice e-mail contains (j) 
content certification notice information and (e) digital 
certificate information. Each of the foregoing information items 
is cited in Fig. 13. 

The content certification notice e-mail sent from the e-mail 
content certifying device 4 is read out by the e-mail terminal 
device 2 at the receiver's side from the storage region 
corresponding to the (b-3) receiver's e-mail address in the 
receiver's mail server in the same manner as the content -certified 
e-mail . 

Upon receipt of the content certification notice e-mail, the 
receiver confirms that there is no tampering with the (j) content 
certification notice information and the (d-1) text of content 
certification sent from the sender based on the foregoing 
information . 

Upon sending of the content certification notice e-mail, the 
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e-mail content certifying device 4 updates the (y-2) transference 
date and time and (z-1) delivery information in the corresponding 
record in the content certificate database (Step S6). This action 
is identical with Step S6 cited in Fig. 2. 

Upon receipt of the content certification notice e-mail, the 
e-mail terminal device 2 at the receiver's side accesses the Web 
server in the e-mail content certifying device 4 in response to a 
receiver's manipulation (Step S21). The access destination is 
located in a region within the Web server indicated by (j-2) URL 
information of the e-mail content certifying device 4 in the (j) 
content certification notice information in the body portion of 
the content certification notice e-mail. This access is gained by 
the e-mail terminal device 2 at the receiver's side through the 
network 3 . 

The Web server in the e-mail content certifying device 4 
sends source data that contains an HTML file of the accessed URL 
to the e-mail terminal device 2 at the receiver's side (Step S22). 
The source data is supplied to the e-mail terminal device 2 at the 
receiver's side from the e-mail content certifying device 4 
through the network 3 . 

The e-mail terminal device 2 at the receiver's side receives 
the source data sent from the Web server and displays an Web page 
on the display screen (Step S23). The receiver can input 
information on the Web page for the information items: the (x-2) 
receiver's identifier and (b-3) receiver's e-mail address. 

By manipulating keys , the receiver inputs characters on the 
Web page for the information items: the (x-2) receiver's 
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identifier and (b-3) receiver's e-mail address. When the receiver 
completes the input manipulation for all the input items, the 
receiver manipulates a sending button displayed on the Web page by 
manipulating the key or mouse pointer, whereupon the input data, 
that is, the (x-2) receiver's identifier and (b-3) receiver's e- 
mail address, is sent to the e-mail content certifying device 4 
from the e-mail terminal device 2 at the receiver's side (Step 
S24). The input data is sent by using a encryption protocol such 
as SSL (Secure Sockets Layer). 

Upon receipt of the input data, the e-mail content certifying 
device 4 retrieves one set of registration information 
corresponding to the (x-2) receiver's identifier contained in the 
input data from the content certificate database (Step S25) . Upon 
retrieval of the corresponding set of registration information, 
the e-mail content certifying device 4 detects whether the (b-3) 
receiver's e-mail address contained in the retrieved set of 
registration information coincides with the (b-3) receiver's e- 
mail address in the received input data (Step S26), by which the 
e-mail content certifying device 4 can confirm that the receiver 
is correct. 

Upon detection of the coincidence of the (b-3) receiver's e- 
mail address in Step S26, the Web server in the e-mail content 
certifying device 4 sends source data, including an HTML file that 
allows downloading of the (d-1) text of content certification, (d- 
2) sender's digital signature, and (e-1) sender's digital 
certificate all contained in the set of registration information 
retrieved in Step S25, to the e-mail terminal device 2 at the 



receiver's side {Step S27). More specifically, a new URL is 
specified to the Web server from the e-mail terminal device 2 at 
the receiver's side by the receiver's sending manipulation in Step 
S24. Thus, if the source data that allows downloading is placed 
in the new URL region, the source data is sent to the e-mail 
terminal device 2 at the receiver's side. The source data is 
supplied from the e-mail content certifying device 4 to the e-mail 
terminal device 2 at the receiver's side through the network 3. 

The e-mail terminal device 2 at the receiver's side receives 
the source data sent from the Web server and displays a Web page 
on the display screen (Step S28). This Web page displays a 
message to request the receiver to download the text of the 
content-certified e-mail. 

When the receiver manipulates a download OK button displayed 
on the Web page with the key or mouse pointer, a download 
initiation command is sent to the e-mail content certifying device 
4 from the e-mail terminal device 2 at the receiver's side (Step 
S29) . 

Upon receipt of the download initiation command, the e-mail 
content certifying device 4 sends the (d-1) text of content 
certification, (d-2) sender's digital signature, and (e-1) sender's 
digital certificate to the e-mail terminal device 2 at the 
receiver's side (Step S30). 

The e-mail terminal device 2 at the receiver's side receives 
the (d-1) text of content certification, (d-2) sender's digital 
signature, and (e-1) sender's digital certificate sent from the e- 
mail content certifying device 4, and displays at least the (d-1) 
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text of content certification on the display screen (Step S31). 

Upon completion of the sending action in Step S30, the e-mail 
content certifying device 4 updates the (y-2) transference date 
and time and (z-2) delivery information in the corresponding 
record within the content certificate database (Step S32), and 
sends a delivery certification e-mail to the address specified by 
the (a-3) sender's e-mail address (Step S33). The delivery 
certification e-mail is sent by using a mail encryption protocol 
such as S/MINE. Also, as shown in Fig. 14, the body portion of 
the delivery certification e-mail contains (k) delivery 
certificate information and (e) digital certificate information. 
Each of the foregoing information items is cited in Fig. 15. 

The delivery certification e-mail sent from the e-mail 
content certifying device 4 is read out by the e-mail terminal 
device 1 at the sender's side from the storage region 
corresponding to the (a-3) sender's e-mail address in the sender's 
mail server in the same manner as the foregoing receipt e-mail. 

Upon receipt of the delivery certification e-mail, the sender 
can confirm that the (d-1) text of content certification has been 
delivered to the receiver based on the foregoing information. 

The reviewing operation that allows the sender to review a 
certified copy is omitted in Fig. 11. It should be appreciated, 
however, that the reviewing operation is carried out in the same 
manner as was explained in the first embodiment . 

As has been discussed, according to the second embodiment, 
the e-mail terminal device 2 at the receiver's side uses the Web 
browser, so that the receiver retrieves the text of the content - 
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certified e-mail by the receiver's manipulation. This makes it 
possible to determine the exact date and time the receiver 
received the text of the content-certified e-mail. Consequently, 
a delivery certificate as an evidence of the delivery of the 
content -certified e-mail to the receiver can be issued to the 
sender, and the same function as the delivery- certified mail in 
the current postal service can be realized on the Internet . 
Hence, the e-mail users can send a notice that requires a record 
of the delivery date by an e-mail. 

In addition, by combining the first and second embodiments, a 
content-certified e-mail having its contents certified by a third 
party with a delivery certificate can be sent /received through the 
e-mail service on the Internet, thereby making it possible to send 
a notice pertaining to law or the like by an e-mail. Accordingly, 
e-mails are used extensively, and the e-mail users' convenience 
can be increased. 

In the first embodiment, the reviewing operation of the 
content -certified e-mail was explained by way of the e-mail 
sending/receiving method between the e-mail terminal device 1 at 
the sender's side and e-mail content certifying device 4. 
However, the reviewing operation can be effected also by 
furnishing the e-mail terminal device 1 at the sender's side with 
a function serving as the Web browser, and the e-mail content 
certifying device 4 with a function serving as the Web server. 

As has been discussed, in the content-certified e-mail 
service system of the present invention, an e-mail containing the 
content-certified text is sent to the e-mail terminal device at 
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the receiver's side by merely sending a content certification 
request e-mail from the e-mail terminal device at the sender's 
side to the e-mail content certifying device. Also, the content- 
certified text is saved in the e-mail content certifying device as 
the registration information. Consequently, the contents of a 
text of an e-mail can be certified readily in a reliable manner. 
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